better trust server certificate defaults