network: add options to control TLS verification