Security: Serve static content via https only.