add ssl_verify_hostname to Security

to close #196