On a related note, I see most of the scanner/http modules have SSL registered explicitly even though HttpClient is always referenced. Scope for review & update for them..?