verify_api_cert is its own setting!