simplify instance ssl setup and tidy file ownership/permissions