Simplify SSL support

Assume we don't care about startTls to simplify config.