configure identity verification from CLI

[jessepeterson]

Add the ability to configure the device identity verification type from the CLI. The actual verifiers themselves have existed for a while (for use as library code), this just exposes a CLI flag.

I'm reasonably concerned about this as it exposes a trivial switch to lower the security of the system. Those types of things tend to just get forgotten about.