Add checkbox to enforce SSL for subdomains

Fixes #11909

\cc @MorrisJobke 
!== please