The osquery implementation always explicitly sets the verify peer option: https://github.com/facebook/osquery/blob/master/osquery/remote/transports/tls.cpp#L109