allow sni to use stream as certificates