[libdefaults]
permitted_enctypes = aes256-cts-hmac-sha384-192 aes256-cts-hmac-sha1-96
pkinit_dh_min_bits=4096
