IMO users should be able to wholly reconfigure how verification works. Even to the extent of enabling the acceptance of certificates that would be rejected by the verifications that are done commonly.