Support for SSL certificates; deferred init of child sockets