ssl for the client

Gross but this seems necessary for now.