- remove host check from unsigned cert checks
- fix bug in auto-revoking on exception