I don't like `--exploit-me` as an option just `--nossl` is probably sufficient. We probably don't want to break scripts, just announce vocally. 

For package maintainers we should also have this in the installation docs.