HOSTDEV-1929 opt out of certificate verification by default -- take two