insecure cannot be used for anything but localhost; this is a gRPC restriction without special handling