@Matt
Hello,
I have tested this and you are probably right, those options seem to be not implemented. However, I was able to disable HTTP on a testing branch of Mervis. This version will be released later this year. As a solution for now, you can try using HTTPS only mode in your browser.
Best regards,
Kryštof Černý