Address chicken-and-egg issues related to the 'http' and 'tls' packages.  Add 'allowInsecureHttp' setting to permit insecure HTTP requests to be issued by the client.  Prevent the package downloader from using the API keys associated with the package repository.  Add and update comments.