So taking extra lua dependency burden, and risk just to save 50 bucks to buy a real SSL certificate?

I'm going to call it certificateless SSL.