server: support nginx key-ex