anchor.diff:  
   %%
   %%
  -init([Sup, {listen, _Peer, _Opts}=Msg]) ->
  -   {ok, 'LISTEN', init(Sup, Msg)}; 
  -
  -init([Sup, {accept, _Peer, _Opts}=Msg]) ->
  -   {ok, 'ACCEPT', init(Sup, Msg), 0};
  -
  -init([Sup, {connect, _Peer, _Opts}=Msg]) ->
  -   {ok, 'CONNECT', init(Sup, Msg), 0};
  -
  -init([{connect, _Peer, _Opts}=Msg]) ->
  -   {ok, 'CONNECT', init(undefined, Msg), 0};
  -
  -init([Sup]) ->
  -   {ok, 'IDLE', #fsm{sup=Sup}}.
  +init([Sup, {listen, _Peer}=Msg, Opts]) ->
  +   {ok, 'LISTEN', init(Msg, #fsm{sup=Sup, opts=Opts})}; 
  +
  +init([Sup, {accept, _Peer}=Msg, Opts]) ->
  +   {ok, 'ACCEPT', init(Msg, #fsm{sup=Sup, opts=Opts}), 0};
  +
  +init([Opts]) ->
  +   {ok, 'IDLE', #fsm{opts=Opts}}.
  +
  +
  +init({accept, Addr}, S)
  + when is_integer(Addr) ->
  +   init({accept, {any, Addr}}, S); 
  +
  +init({accept, Addr}, #fsm{sup=Sup}=S) ->
  +   Lpid = knet_acceptor_sup:server(Sup),
  +   {ok, [LSock]} = konduit:ioctl(socket, knet_ssl, Lpid),
  +   lager:info("ssl accepting ~p (~p)", [Addr, LSock]),
  +   S#fsm{
  +      role = server,
  +      sock = LSock,
  +      addr = Addr
  +   };
  +
  +init({listen, Port}, S)
  + when is_integer(Port) ->
  +   init({listen, {any, Port}}, S); 
  +
  +init({listen, {<<>>, Port}}, S)
  + when is_integer(Port) ->
  +   init({listen, {any, Port}}, S); 
  +
  +init({listen, Addr}, #fsm{sup=Sup, opts=Opts}=S) ->
  +   % start ssl listener
  +   {IP, Port}  = Addr,
  +   {ok, LSock} = ssl:listen(Port, [
  +      {ip, IP}, 
  +      {reuseaddr, true} | opts(Opts, ?SSL_OPTS) ++ opts(Opts, ?TCP_OPTS) ++ ?SO_TCP
  +   ]),
  +   lager:info("ssl listen on ~p", [Addr]),
  +   % spawn acceptor pool
  +   Pool = proplists:get_value(acceptor, Opts, ?KO_TCP_ACCEPTOR),
  +   spawn_link(
  +      fun() ->
  +         Factory = knet_acceptor_sup:factory(Sup),
  +         [ konduit_sup:spawn(Factory) || _ <- lists:seq(1, Pool) ] 
  +      end
  +   ),
  +   S#fsm{
  +      role = server,
  +      sock = LSock,
  +      addr = Addr
  +   }.
   
   %%
   %%
  
positive.code: %%% IDLE: allows to chain ssl konduit
  %%%
  %%%------------------------------------------------------------------
  'IDLE'({accept,  _Peer, _Opts}=Msg, Inet) ->
     {next_state, 'ACCEPT', init(Inet, Msg), 0};
  'IDLE'({connect, _Peer, _Opts}=Msg, Inet) ->
     {next_state, 'CONNECT', init(Inet, Msg), 0}.
  
  %%%------------------------------------------------------------------
  %%%
  
negative.code: %%%
  %%%------------------------------------------------------------------
  
  
  %%
  %% validate that host to connect is an acceptable format
  