make strictSSL behavior configurable