only set HSTS when crypto enabled