Use isRequestSecureReal(req)