Allow override of default encryption bits

[vpetersson]

We should provide a sensible default for encryption keys (EC256), but it also makes sense to have the ability to override this if needed.