Actually, I just noticed the comment says `secure` should always be set to `False`.

Does this means that this provider doesn't work expose https endpoint?