insecureTls

when true, accepts any TLS certificate (including self-signed ones) for both the token request and the terminal's own calls - only meant for local/dev environments with a self-signed certificate (e.g. *.apa-dev.local); never enable this against a production terminal service, since it disables all certificate validation.