added SSL constraint