I was partway done implementing a UI for users to approve untrusted certs with, but let's just make them configure their servers right instead.