adding ssl_only parameter, which disables all non-encrypted tcp listeners