Don't assume non-https base_url.