optionally allow a passwd callback for opening the ssl keys