adding configuration for client-side SSL and internode encryption

reviewed by timiblossom