add ssl option in addition to 'ssl_only'