.onion with TLS is easy 2do ?  or self-signed SSL just to stop m-i-m sniffing clear text