Pe 3098/allow ssl cert config in init phase

I ended up removing the .start call in add-war-handler because it was breaking the add-war-handler test after this change with an IllegalStateException thrown from the Jetty code. Once .start was removed the test was passing fine, so I assume this is kosher.