Does `--no-verify` override the restriction via hooks, or are there some kind of server-side hooks that can be used?