You can disable legacy support by not generating any RSA keys, or by building with DISABLE_LEGACY.