on-demand TLS OK for swag.jaapi.net