if steward does not allow HTTP over LAN, and if incoming HTTP, and if not loopback, then 307 to https