Make http use the new security loader interface.