Verify peers on SSL connections

Given the amount and nature of data you send, it's not really OK to make it easy to MITM the system.

If you're aware that people use self signed certs, it should be a config key, with a sane default.