only use repos with https