• summary: no way for force scheme in request to be https --> no way to force scheme in request to be https