child-cfg: Optionally use 96-bit truncation for HMAC-SHA-256