flipping logic on whether :verify_peer is written, we only should be doing on https