easier to just ignore all *key and *crt files
adding ssl keys and certs to ssl.conf