It would be better to keep the SSL arguments here and use them to set system properties which can be picked up by our SocketFactory. Removing the command line options just makes usage more divergent from the vanilla C* tools