Add mechanism to control whether requests to some endpoints use secure protocol