add https ferm rule to apache class for now