Switch to using PBE SHA-256 + AES256 for encrypting private keys instead of SHA-1 + 3-key TripleDES