We no longer enable the insecure key by default