hack in ssh-over-ssl support (port 4443)

This reuses the port that we had to open for websockets. Kind of cludgy to
double-encrypt, but I haven't run any benchmarks to see if it really matters.