tidy up stderr output, catch missing ssl certs and keys