I just released MAAS 2.9.0 beta3 which adds support to specify the IPMI cipher suite id, K_g key, and IPMI user privilege level.
MAAS still defaults to C3 as not all machines support C17. I am working on a branch for beta4 that will allow MAAS to automatically discover the highest supported IPMI cipher suite id and K_g key automatically.