Nope. I agree that it shouldn't be used in production. I may even add a note like that to the `README`.

Primarily, I don't want to get called out for `OpenSSL::SSL::VERIFY_NONE` (à la http://jamesgolick.com/2011/2/15/verify-none..html).

Definitely willing to help test if you make the changes.