adding pfx and passphrase option.
FIXME: not sure about tunnel option