mbedtls-server: verify_option and auth_mode options should be valid

verify_options in mbedtls-server is slightly different from openssl-server. So made mbedtls-server have the same semantic about verify_option.

And also #2902 was the workaround fix for the 'weird' verify_option, so changed auth_mode to match verify_option's meaning.

this patch is basically #3257 for 4.3-stable

revert: purify_inplace only relative

release v4.4.0

tag 4.3.5

lws_mux_mark_immortal: remove noisy log

sort-dns: fix scope comparison

#2537

ss: sigv4: disable ctest until new auth available