Add 'GET_CAPABILITY fips' to enable runtime check for CONFIG_FIPS=y