Add https where it make sense and work
    
    Since some of these URL are used either for gpg key or to download
    code that would be installed and/or executed, we need to make
    sure there is no risk of man in the middle.