separate out the haproxy ssl_pem from enabling ha_proxy_z1 job