as a non-blocking comment: I'd suggested VERIFIED_CERTIFICATES vs something more specific for just the banners on the dashboard.  Calling it ENABLE_VERIFIED_CERTIFICATES to be consistent with the other flags is totally fine by me, and seems like a good idea.