Set cryptmethod=blowfish, as the default pkzip encryption isn't worth having.