WICKET-5327 write warning to stderr for insecure default crypt key
WICKET-5410 moved all settings to org.apache.wicket.settings