Not perfect. When we use EASE it allows disabling it on certain http-only sites. But instead of trying to visit http site after disabling, it tries https site, which gives certificate and connection errors. Then we have to remove letter s from address. Also does not allow us to make own rules.