the kernel can now force ssl