- never a need to export keypair, cert is always enough
- generate via specific invocation - auto-generate if SSL and no mounted certificate found - allow specifying hostname for certificate
- default to secure - parameterize via env var
- basic operation flow with placeholder functions - implement server and shell launch - allow commands to pass to shell - update Dockerfile to load entrypoint only - update Dockerfile to set permissions for certs directory
