Make not-hashing optional, hashing the default.

A SecureString should not require any additional attribute to be set to
actually act in a more secure way. Therefore, we change the
functionality to by default always hash, and only not do so if we are
specifically asked not to hash.

Signed-off-by: Matthias Nott <matthias.nott@sap.com>