I'm not a security person; but I'm sure I've read that using `VERIFY_NONE` is not a good thing. E.g. http://jamesgolick.com/2011/2/15/verify-none..html