remove ondisk verification (#3623). For backwards compatibility, specifying 'insecure-options=ondisk' will still run without ...