http: remove xftrust options