just implemented -secure option for this purpose; https://github.com/azer/boxcars/blob/master/secure.go

usage example; http://github.com/azer/boxcars#security

thanks for the helpful comment!