Various tweaks for SSL for PCI compliance