Wow I've totally missed the require encryption option in the UI. But now I see why: while it is present in the account after you've set-up the account, it isn't there in the dialog when adding a new account.

But indeed, an "ignore-ssl-errors" option might be welcome.