always enable ssl and disable default