registry: treat localhost as secure by default in --insecure-registry is empty