added ssl_only option