change `--tls-verify` default to `yes`
