added support for late validation of cert/key options allowing only one to be define for split usage