Built-in ssl module implementation
Some tweaks

- for native ssl server, make cert optional
- for client, default crt/key to None to test behavior with various set
and unset cert inputs