bootstrap, gnulib-tool: use https instead of insecure rsync