SSL + ProSite + Domain Mapping

Hi

I have ProSite and Domain Mapping installed.

How can I force the subsites to use HTTPS only?
Can my client install their own ssl certificate?

Thanks!