Make gatehouse 'when' clauses work with dry runs
Nginx proxy config more flexible, allow selective https enforcement