some changes left over as I prepare to change ssl service