ssl_allowed used improperly