If his concern is about loading schemas over the network, he should disable unencrypted HTTP as well.
Not a member of The Register? Create a new account here.
Remember me on this computer? Post anonymously?