only hybrid PQC key exchanges with ML-KEM-768 or ML-KEM-1024 are allowed in FUTURE [Sanity/retention] gnutls, openssl and nss should be able to connect to themselves in FUTURE openssl DTLS doesn't work in FUTURE if cdn.redhat.com is still broken in FUTURE, document it

As cryptographic landscape is changing with the introduction of Post-Quantum Cryptography, the future connections will need to use PQC exclusively. The RHEL-10.1 FUTURE policy now will allow only hybrid ML-KEM key exchanges. This might significantly impact interoperability with the wider internet, including, but not limited to downloading updates from Red Hat, making FUTURE policy best suited for controlled, isolated deployments for the time being. Note: future versions of RHEL-10 may further restrict the allowed signature algorithms in certificates and signatures to exclusively post-quantum algorithms in the FUTURE policy.