By default, if connecting to localhost or an IP address, insecure is
enabled so self-signed certs are okay.
By default, if connecting to a domain name, insecure is disabled so
self-signed certs will be rejected, unless insecure is enabled.