per-replication strictSSL validation (issue #11)