let the user decide how ssl verification is handled