Best practice new set up for Domain Mapping and SSL

Hi!

We need to setup a new/fresh install of a WP multisite.

After reviewing several post in the Forum we are still in doubt.

What is the best practice for combining Domain Mapping and SSL?

Our current scenario calls for having a main_domain.com without SSL and then have SSL on mapped domains as needed.
Example:
http://main_domain.com
httpS://another_domain_1.com
http://another_domain_2.com
http://another_domain_3.com

We intend to use a membership solution - most likely S2members.

Only one site needs SSL for the moment, but this could change in the future.

We are flexible and would like to apply best practice recommendations prior starting development.

We have Cpanel.

Our host provider allows for wildcard SSL.
Help Documentation states: "This is a manual procedure that is required for all subdomains that you need to be secured. This means that if you have 3 different sites hosted on 3 different subdomains, you would need to repeat this procedure 3 times."

Thanks for taking the time to reply.

RG