Can't we just set `$_SERVER['HTTPS']` in the test? I know its using evil globals, but that strikes me as less impact than creating a new API in `Director` with the caveat that its only intended for testing.