We need sslkeypass even when ssl forwarding is disabled, since it is also used for the server certificates
Cleanup