Not logging encrypted sessions by default is not a good idea.

We can assume the user's PC is safe, otherwise encryption won't help
anyway as the key could be stolen. If the user is too paranoid, he can
still disable it and thus also force the other end to stop logging.