Totally agree; was looking into the SSLContext API for a while trying to find something and came up blank.  Decided that I was more or less OK with this being tested downstream by all of our jetty/http-client code.