by making the sys/crypto transforms depend on (per-transform-config-keyword|opencrypto) Thanks to Martin Husemann for double-checking the changes.