Make `safe' (EC)DSA nonces the default.