added config options for forward secrecy