listen_ssl for Debian hosts now uses default-ssl