Right, it's not specified. But I didn't dig for specifics. One concern is that custom schemes aren't considered secure. But this may just be an implementation tweak, and so OK.