bah. leiningen.org doesn't do ssl