Not sure if this is ultimately an improvement, but I made a few changes around this in 4afe6b8.  `ssl-context-factory` would now take a single argument, a map of options, rather than the multiple parameters it had before.  I also created a new schema type, `WebserverSslContextFactory`, that the argument to `ssl-context-factory` is validated against.