Not sure why Incus requires the underlying OCI Registry to serve content over TLS

And not sure why from the host there is not an obvious way to hit a container with its mDNS name (within the bridge network, containers can see each other easily)

Lots of assumptions