Tweak "insecure transport scheme" warning

Change the warning to a deprecation and say that in the future we're
going to turn off non-https by default and require the use of
--trusted-host.