default it to on since I can't imagine why anyone would deliberately want the limited strength versions given a choice. Cribbed from java/openjdk6