The AES algorithm for DNS cookies was being kept for legacy reasons, and it can be safely removed in the next major release. Mark is as deprecated, so the `named-checkconf` prints a warning when in use.