Support insecure or self-signed certificates when fetching hosted vulnerability files