actually use the ssl pem we added in haproxy