clarify no HTTPS for OTAP possible