Make it configurable whether https is necessary in issuer.