You should be able to apply ssl to just the single instance by using the force encryption option for that instance. I'd check it on a test box 1st, never...