ssl refs, tighten space a bit