AMP requires that all content in amp-* components be https. We need to find a way to elegantly handle this. Should we just let it fail and have AMP raise an error? Or should we remove the element completely?