I think it would be better to be strict. People might get the false idea that longer keys would mean more secure encryption. Cryptographic knowledge is not common (I too a n00b in this case).