comment to use ssh as alternative to https