Per-client TLS config vs global insecureSkipTLSVerify for mixed-trust k6 targets
k6 scripts that target both public CA-signed endpoints and internal services with self-signed certificates face a configuration trade-off. The http client supports insecureSkipTLSVerify, which disables certificate validation for every request using that client instance, but k6 does not document a per-request override. Mixing trust models therefore requires e