accept strictSSL false as a config option