added config value for SSL enforcement - default is to not enforce