Make sure we use the https:// URL before building the .ova image 1. because you can't `update-vm --pull` without setting up your keypair first with ssh:// URLs 1. because it's more firewall friendly to use HTTPS