option to allow self signed certs