Clarify HTTPS requirement.