Relax TLS peer verification. retrieve has no --insecure flag; this is set
only by the quickchr provider (trust-by-provenance for the VM's self-signed
TLS forward — see src/resolver/quickchr-provider.ts), so when present its
source is always provider and it is surfaced as meta.settings.insecure
for auditability.
Relax TLS peer verification. retrieve has no
--insecureflag; this is set only by the quickchr provider (trust-by-provenance for the VM's self-signed TLS forward — seesrc/resolver/quickchr-provider.ts), so when present its source is alwaysproviderand it is surfaced asmeta.settings.insecurefor auditability.