refactor ssl support into a separate recipe meant to be run on the deploy event