enable their bad ssl layer - this will fail when their cert changes, so we will only have it as an option