consistent with public URLs, this also changes the default behavior for expiring URLs to use the https scheme rather than http.
