"sslInsecure" and "sslAllowAll" is pretty vague in reguards to what it will actually do when set. probably should find more descriptive and meaningful names for these, maybe something like:

* sslCertificateValidation (false to disable)
* sslCertificateHostnameValidation (false to disable)