Also set CURLOPT_SSL_VERIFYHOST=0 when "verify-https-binary-caches" is false

This makes that option even more insecure, by also not checking the SSL host.

But without this parameter, one can still get SSL errors even when
"verify-https-binary-caches" is false, which is unexpected IMO.