only certifcate-based encryption is supported as libressl removed support for PSK. this was originally based on a patch by Bernard Spil, but it's been reworked to notify+exit when PSK is configured in the agent/proxy/server configuration file. ok robert@ (earlier version of this patch)