explicit ssl cert/key paths