Update xmlsec to use SHA256 by default for realz.