Handle invalid certificate chains (with the ca_cert_path option)
Explicitly disconnect when refusing to acknowledge a certificate change