$ssl is implied by $ssl_only
(I'm too lazy to add ssl=true AND ssl_only=true to each location)