Make sure net/http is under change control, also removing --hsts-hosts.