document allow_weak_crypto