fix(cli): --insecure also skips TLS certificate verification (#38531)