I was slightly surprised by the following in my local (secure) UI:

Please, let's not use "insecure mode" (or "secure mode") for anything other than --insecure=[true/false]. This should instead say something along the lines of login disabled, or anonymous user, etc...