Until we re-add a valid cert, store Facts URLs as insecure