useNoSSLForPackages and other badly-conceived options (notice non-hijacked thread!)