make SSL host validation configurable.