Ah, sorry.  I misunderstood your previous comment.  I had been thinking that we weren't setting a default and that http-kit happened to be using an `:insecure?` of true by default.  Yes, I would prefer that we have `clj-http-client` use an `:insecure?` value of false by default since that seems fairly industry-standard -- unless we have some precedent in Puppet which would contradict this.