I've now set up mod_rewrite to force https on the Jenkins servers. We'll see if that breaks anything in the builds; my guess is that the occasional call to retrieve a product in a preceding build may fail when it hits the redirect.