Don't tunnel HTTPS traffic by default

This is actually from the other PR. You're right though that we should check for that anyway and return false, so I changed to that.