Shouldn't we default to `OpenSSL::SSL::VERIFY_PEER` unless the config specifies *not* to verify?