This can only be done by a root user. See failing tests: http://ci.openmicroscopy.org/view/Failing/job/OMERO-5.0-merge-integration-java/lastCompletedBuild/

If the server doesn't provide an insecure endpoint, then likely there *isn't* one. When/where were you seeing this happen?