Move |no_cert_verify| into state machine