The current scripts only allow the use of secure endpoints through the use of routes. If the user provided a secure endpoint and doesn't need/want to grant additional privileges to the serviceAccount, the value of org.kie.server.location can only be http://<hostname>:80

For the case of APBs and operator the hostname can be retrieved during deployment and doesn't require any additional permissions therefore the use of the route during startup is not required.