refactored ssl cert and passphrase handling to be more configurable