allow overriding ssl onSecure callback