Get public repos over HTTPS

Because otherwise we need to have a key set up, which is annoying for
doing automated testing etc.