automatically enable verify_api_cert when in local-mode

This resolves #1461.

(wip? will changelog/doc_chages)