progs/cc-kem.c (getkem): Parse the `kdf' spec after bulk crypto.