We should really make it possible to use our services over SSL, e.g. to fix MBS-2411. This would need to be set up on the frontend proxy, after someone buys a cert. It's possible to get a cert that applies to multiple names, or we can get separate certificates for different services; it'd be an nginx configuration question after that.