base-system Disable EC/RC5 algorithms (as they seem to be patented) Enable support for RFC 3779 (X.509 Extensions for IP Addresses and AS Identifiers)