Listen only on HTTPS, since credentials are being passed.