automatically enable verify_api_cert when in local-mode

This resolves #1461