allow resolvers in non-ssl vhosts