=== Message

 * Using {protocol.insecure} protocol is insecure. Use {protocol.alternatives} instead.
 * Using a relaxed mixed content policy is security-sensitive.
 * Make sure allowing clear-text traffic is safe here.
 * Omitting {https_only} enables clear-text protocols. Make sure it is safe here.