router ssl first pass

rough draft mind dump for ssl
This doesn't belong in an API