Allow client to verify ssl fingerprints.
Force TLSv1_2 when the python/openssl does allow it.