change_request_destination(): Reject rewrites from http to https