SSL certificates
 

Enable the SSL certificates module only for users who have assigned IP address. If an assigned IP address is used, do not create a self-signed certificate for the newly created user and hide both the "SSL" check box in the WWW domain edit form and the SSL certificates module.

I hope this setting can be turned on or off either via the Policy function or from ISPmanager configuration file. Otherwise it will break a few sites from the installation I am using - the assigned IP address is not really needed unless you have visitors that do not support SNI (Mainly just Windows XP users using IE).