fix: select sha1 protection by default because of compatibility reasons