(ITS#5360) wrong default for TLSVerifyClient (with GnuTLS?)