[nova][tempest] Should we make image certificate validation a configurable feature?