switch RSA key generation default to 2048 bits (matching ssh); ok miod@