Permit unsafe redirects (configurable)

/cc @opscode/release-engineers