DRBG: add check for XOF so these can be disallowed by the DRBGs