The ```get_requirements()``` function in setup.py is currently commented out because there is no way through setuptools to get setup.py's instance of pip to respect this line, hence pip will crawl all kinds of plaintext http pages and subject the client to potential mitm.