We should annotate features in features.json to say which are limited to https contexts, and expose that on http://webkit.org/status
I think the list is: Geolocation getUserMedia Apple Pay