[libdefaults]
permitted_enctypes = aes256-cts-hmac-sha384-192
pkinit_dh_min_bits=4096