Trial: only allow https