now verifying certs in SSL connections by default