- update all clients to call ssl_login() directly when appropriate - rename references to NotAllowed -> ActionNotAllowed, because NotAllowed had already been renamed - raise an error in CreateSSLContext instead of immediately exiting