There is now a SecureURL config option for cdn buckets