add user cert chain functionality at SSL level instead of just CTX