There should be just one option, verify_https_client, which controls incoming and outgoing validation for the HTTPS wrapper