xCA 2.8.0 uses 3DES(!) for PKCS#12 export

[Strider3000]

When decrypting a PKCS#12 file generated by xCA 2.8.0 I noticed openssl gave me this info:

openssl pkcs12 -info -in p12test.pfx -nodes
Enter Import Password:
MAC: sha1, Iteration 1
MAC length: 20, salt length: 8
PKCS7 Encrypted data: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
Certificate bag
Bag Attributes

PKCS7 Data
Shrouded Keybag: pbeWithSHA1And3-KeyTripleDES-CBC, Iteration 2048
Bag Attributes

I noticed that xCA is using 3DES for security with SHA1.
Please either a) update the default P12 export handling to use better default cryptographic mechanisms (as defined by RFC 7292) or b) allow users to configure these cryptographic mechanisms directly.