cPanel prior to 64.0.21 does not enforce demo restrictions for SSL API calls (SEC-249).
cpanel cpanel