reflect the new default for the secirtyprovider

This is a backwards-incopmpatible change.  To restore the old behvaiour users
will have to explicitly set `securityprovider => 'psk'`.