pass ssl config options as filenames rather than buffers