Why isn't the web-redirect option available for an HTTP class with a never-admit policy?