Move the untrusted SSL hack to a config option