- make crypto_cipher_flags() return u32 (this means it will return
  the actual flags reliably, instead of being just a boolean op).
- simplify error path in crypto_init_flags().