add ssl-opts flag, describe all flags to readme