protected InputStream getKeyInputStream() throws IOException {
        return new FileInputStream(serverSslConfig.getKeyFile());
    }
Can be overridden to implement your own decryption scheme.
zuul-core/src/main/java/com/netflix/zuul/netty/ssl/BaseSslContextFactory.java