Description of problem: ipahealthcheck.ds.config displays CRITICAL message in STIG enviornment. 

Version-Release number of selected component (if applicable):
ipa-server-4.9.12-2.module+el8.9.0+18921+013c0de2.x86_64
389-ds-base-1.4.3.36-1.module+el8.9.0+19111+92b42fe2.x86_64
How reproducible:
Always

Steps to Reproduce:
1. Install IPA on STIG env.
2. ipa-healthcheck', '--output-type', 'json', '--failures-only'

Actual results:
RUN ['ipa-healthcheck', '--output-type', 'json', '--failures-only']
[
  {
    "source": "ipahealthcheck.ds.config",
    "check": "ConfigCheck",
    "result": "CRITICAL",
    "uuid": "29681a74-6e3c-47ef-84bd-2129992ae74f",
    "when": "20230704084231Z",
    "duration": "0.053042",
    "kw": {
      "key": "DSCLE0002",
      "items": [
        "cn=config"
      ],  
      "msg": "Password storage schemes in Directory Server define how passwords are hashed via a\none-way mathematical function for storage. Knowing the hash it is difficult to gain\nthe input, but knowing the input you can easily compare the hash.\n\nMany hashes are well known for cryptograhpic verification properties, but are\ndesigned to be *fast* to validate. This is the opposite of what we desire for password\nstorage. In the unlikely event of a disclosure, you want hashes to be *difficult* to\nverify, as this adds a cost of work to an attacker.\n\nIn Directory Server, we offer one hash suitable for this (PBKDF2-SHA512) and one hash\nfor \"legacy\" support (SSHA512).\n\nYour configuration does not use these for password storage or the root password storage\nscheme.\n" 
    }   
  }
]
DEBUG    Exit code: 1
      
Expected results:
Fix the critical message

Additional info: