For RHEL 10.1 the crypto-policy will by default support PQC, RHEL 9.7 users can opt into PQC by switching to the DEFAULT:PQ policy.

This is to support just PQC key exchanges. With all the work that has been put into using PROFILE=SYSTEM on all services this should work out of the box, but must be verified.

If it doesn't work, it must be documented as a known limitation while we fix any bugs.