Make the serpent cipher and other non-defaults an opt-in build-time requirement

Make the serpent cipher something we opt in to supporting at build-time, since it's not in the standard library, and it's not part of golang.org/x/crypto. Ciphers which predate AES and digest algorithms which predate SHA-1 should probably also get similar treatment.