mozilla-https-everywhere -- good to include?