adding ssl-cert and ca-certificates so we can do TLS handshakes (required for auth)