favor ssh over https