Allow the clients to decide if validation of SSL certificates should be skipped

Instead of just assuming that in DEBUG root certificates should not be evaluated allow the callers to decide.
In order to not break existing clients, in DEBUG evaluation still is off, but in release builds you can set the allowUntrustedSSLCertificates flag.
"connections for any root certificates" is vague, I'd say "SSL connections are allowed regardless of the certificate configuration".