Remove mention of the insecure key being enabled by default, because that's no longer true