GnuTLS now offers an option to disable PKCS#1 v1.5 padding allow-rsa-pkcs1-encrypt = false,
an effect we'd like to see in RHEL-10.
In addition to toggling it in crypto-policies, gnutls itself should default to it disabled by default,
say, in a scenario without a configuration file.

Introduction: https://gitlab.com/gnutls/gnutls/-/merge_requests/1828
Fix-up: https://gitlab.com/gnutls/gnutls/-/merge_requests/1830
Commentary on the upstream testsuite readiness: https://gitlab.com/gnutls/gnutls/-/issues/1622
Proposed gnutls merge request: https://gitlab.com/redhat/centos-stream/rpms/gnutls/-/merge_requests/98
crypto-policies flip: https://issues.redhat.com/browse/RHEL-64746
Note that the merge request above or an analogous fix is now a must for gnutls build to pass the tests after the crypto-policies flip.