Allow HTTP instead of HTTPS in corner cases like `heroku update`