allow insecure mode for self-signed certs