consistent with public URLs, this also changes the default behavior
for expiring URLs to use the https scheme rather than http.