Shouldn't this be in the config (goes same for API requires ssl)