drop stunnel and isolate ssl to haproxy only