Personally, I'd be happy with a fall-back to MD5 and a warning at install time. We don't do anything security-sensitive here so MD5 vs HMAC is not a problem for us. And we will be on 2.3 at some point in the next few months....