Kernel configs - enabled but unused modules

[JonathonHall-Purism]

There are a lot of modules enabled in the kernel configs that aren't included in the initrd - we should disable these if not needed to save space.

A few modules maybe should be builtin instead, such as AES support. Cryptsetup is configured to use the kernel crypto backend, which would seem to be impacted by this, although it does currently work.

Previously discussed in #1184 (comment) and #1232 (comment)