server hardening, flexible configuration of certificates, more convenient name of flag