use SSLTrustManager to verify user-trusted certs