Encrypted streams now verify peers by default