By moving the return into a location directive, one can provide exceptions by adding locations. This is similar to what the forceSSL option does.