Upstream has released a new LTS branch, 2.28.x; it is not ABI
compatible with the 2.16.x branch, so it will be possible to enable
CMAC without creating subtle ABI compatibility issues. Also, the
upgrade is inevitable since support for 2.16.x will end in 2021.
