> Security and usability are always at odds. No they are not. Start the server for the first time? ask users to create an admin account, then display a notice

> Security and usability are always at odds. No they are not. Start the server for the first time? ask users to create an admin account, then display a notice saying they didn't configure SSL or something else properly. Problem solved. Each time the server is started and the setup isn't secure enough, display a message. That's how you do it.