It looks like `UNVERIFIED_ISSUER` is either a string or `None` everywhere. Is it ok to be `False` here?