apps: limit get_cipher() to not return AEAD or XTS ciphers