MT#6295 API: allow tests without invalid/unauth cert

which are (for now) difficult to get on test machines