add check_globalsdexit
make ssl-expiration smarter