Can you get away with only one SSLSocketFactory field? We don't need to support setting this to null.