Always https for the paranoid users