does SSL on `localhost` make any sense?