tcp: default to passive mode
ssl: implement SSL sockets