Use HTTPS to talk to package archives