this batch of cleanups should warrant a version bump - also allowing plain HTTP endpoints definitely would