swh: Allow callers to disable X.509 certificate verification.