Don't accidentally print :signing_key, verify HTTPS on more URLs, set request_timeout, and handle theoretical raise on writing to nonce cache