      opts.beforeRedirect = function (options) {
        assert.equal(options.protocol, "http:");
        options.protocol = "https:";
      };
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.