Configuring Monitor for SSL does not disable non-SSL connections

[dlmarion]

If the monitor is configured for SSL/TLS (https), is the intention for non-SSL (http) connections to also be allowed? Looking at EmbeddedWebServer, that appears to be what is happening. It looks like this change was made in 2.0 and closed a ticket having to do with MonitorSslIT failing.