ssl for the client

`match *self` is nicer