manager: handle SSL sockets