Change secure based on the protocol, but allow for override.