set the default for default_priorities to only 'html' for security reasons

/cc @seldaek