note xmlrpclib doesn't verify certs (yet)
merge heads