```verify=1``` with plain http repo still works