ssl_wrap_socket capability to override default _verify_callback

This is to allow customized server certificate validation.

Use cases include:

* a certificate that passes all of chain validation with the exception of the hostname (instances where the IP is specified during connection instead of the hostname)
* you wish to restrict connections to only servers providing specific certificates ie. a single allowable CN (common name).