hls: support keys over https as well as http