app-backup/bacula: use HTTPS