Nginx doesn't suck at SSL after all