refactor
ssl
roles
relation to cam