Use stronger crypto by default (aes256-ctr, hmac-sha1)