improvement: Add missing config fields: response-header-timeout, keep-alive, security.insecure-skip-verify

[bmoylan]

These three fields were partially implemented in different ways, but were missing the end-to-end plumbing to config.

---

This change is