Test an old style PSK callback with no cert will prefer SHA-256