Calling it `ENABLE_VERIFIED_CERTIFICATES` would be more consistent with the other feature settings. Also leave an empty line after it. Shouldn't the default be True?