From https://github.com/openshift/hypershift/issues/354

The ignition proxy communicates with MCO pods over an HTTP connection, which violates security invariants defined by the customer. This communication needs to be made secure, either using TLS or by refactoring the mechanism entirely to something else that is secure.