Add fips option, required for 4.56, illegal otherwise, so default to nil