It wasn't clear to me that we really had a standard for this.  It might have made sense to prefix anything SSL-related (e.g., keystore, key-password, cipher-suites, client-auth) with `ssl-` but it's probably too late to do that now.  If you have a strong preference for an `ssl-` prefix (`ssl-crl-path`?), I can do that, but it doesn't seem like it would give us much.