fall back to the old ssl_verify_mode from 11

Now that we're getting chef12 by default,  or else knife-opc will just throw SSL errors

This is a bandaid.  The more complete fix would be to mimic `chef-server-ctl` commands if CS12 is detected installed.