I'd like to stick with `fail_if_no_peer_cert`, which is also the name of the ssl application option. The "require"-part could be a bit misleading in my opinion, as it is ignored if `verify_ssl_certificates = false`.