shell: only export ssl-related vars if the certs are available