use the fact that ssl_to_gear triggers port exposure as a hack