localhost is in the Secure Context specification. It won’t be taken away.