BareAddress adds a scheme where none was, so the host it yielded carried one and every URL built from it carried two. Caught before a push: the host is now taken with no scheme and no port, and every URL adds its own. `rollout mint --again` mints every credential afresh for exactly this case — a mint that was wrong before anything received it.