always disable the builtin hostname verification

It conflicts with our own, more flexible functionality

Fixes #524