Add comment highlighting the deprecation of global https_only

I was initially confused why the global https_only config value didn't do anything, so I added a comment highlighting its deprecation.