piuk, you shure you want to have your site behind cloudflare and let them do an authorized MITM on your users?
Putting your site behind cloudflare is throwing away all the security you've built.
I think the way it is set up no private key or password is ever sent over the wire.
I hope you're right is all I can say.