clone: re-add a way to ignore certificate errors This used to be done via transport flags, which was removed in a previous commit.