Since we're at it: shouldn't `--find-links` also require `--allow-no-ssl`? It can be a separate patch, of course (I can work on it).