use secure media thumbnail where available