Use assertion signing instead of response signing by default.