Website Security-and-privacy bucket: add hsts criteria

[L-e-N]

hsts is a step-up from https:
an https web page without hsts can be compromised to be accessed through http