Encourage HSTS in SDK

[maxdos64]

HTTP Strict Transport Security concept should be implemented for all client APIs

This means that no request should never be sent from the client
to the server without TLS (not even the initial request).
Only exception is if the user/admin explicitly indicates so (e.g., running client in secured cluster)
Multiple bold warnings need to be added in the specifications and wiki to warn the user of using it outside of secure environments