It does make sense to set sha256 as the default. I would like even strong to future proof things a bit, but sha256 is a good upgrade.