This is how security bugs get introduced into open source. This comment came into a project I'm watching today, and I don't have the time to follow up on how bad of an idea that is:

"If you are still interested, I got it working by removing verify=True"