Log scary errors if :http_security is off

I left this off for testing something a while ago, but would have noticed sooner to re-enable if there were some scary errors in the log during startup.