I think we should default to using secure like we did before. (It used to be `'http' ? http : https` but is now switched to `'https' ? https: http`--we should keep it as it was to be safe. There's something to be said about backwards compatibility for bad input :).)