Allow local server-status requests on http

There is no point in forcing them to https, which turns them to
expernal requests, which we consequently have to deny.
By keeping those requests on http, those requests stay local requests,
and we can properly serve monitoring scripts.

Bug: 71606
Change-Id: If232474c5eeb49a0b27abe7c82ce9cf71d7cd23f