9p needn't be in the clear, and i thought exportfs defaulted to rc4_256 sha1