session vcl: cert key add/del with socket api