As BeyondCorp treats this setting is internally configurable, move verify_urls to a buildinfo property allowing it to be set.
The property prefers first an internal setting, failing that checks BeyondCorp and returns BEYOND_CORP_VERIFY_URLS, finally returning the original VERIFY_URLS.
Change references to the verify_urls flag to the build_info property.
Rework the behavior of verify_urls.