Totally correct, and we need to re-iterate the SSL requirement in a few places. Thanks for pointing that out.