This is the default going forward, and separating it out into its own commit removes the noise from the following sync commit.
Note: this disables the MBEDTLS_DEPRECATED_REMOVED configuration value, because we require the now-deprecated MD5 & SHA functions for bcrypt.