Optionally use internal-remote transfer instead of local-to-remote if possible

this is why I said hash is the safest. Crypt remote does not support hashes at the moment. You have to decide yourself.

Here some discussion about this exact issue: