Add --prefer-insecure option (Fixes #2364)