need to allow unauthorized connections due to things like a wildcard cert