Enabling removal of unused settings, generalized ssl

So we can use 'no', 'yes', or 'required' on ssl, and not hinge the rest
on it.