scrub self-signed ssl