I think, in order to make this backwards compatible (and *correct*), we need to open a *separate* listener on `:443` and just reject connections on `:80`... this would at least give feedback as to why you can't perform an action vs. just not being able to open a connection.

If we do this, it doesn't break backwards compatibility, so we don't need *another* flag to turn it on.

Thoughts?