On merge: metadata.downloadPlaceNames accepts plain http only for the loopback address itself (http://127.0.0.1.example.com/ and http://127.0.0.1@host/ are refused; test download_base_is_https_or_loopback_only).