Make NEG_PUBKEY_BUG on by default.