include caveat about accepting the server certificate