secure connection = https/SSL for HTTP requests, sockets/SSL for PBC, right? Should that be spelled out here?