To ensure RC4 HMAC-MD5 was not used in FIPS mode, access to HMAC-MD4/5 is not allowed in this mode. However, since we provide the [libdefaults]radius_md5_fips_override configuration parameter to allow using RADIUS regardless to the FIPS restrictions, we should allow HMAC-MD5 to be used too in this case, because it is required for the newly supported Message-Authenticator attribute. Having an exception for MD5 alone, but not for HMAC-MD5 does not make sense.