ssl for the client

@reem The naming here hasn't made me happy, but I've struggled to think of anything better...