Better merging rules on ssl values