Private winget source — use HTTPS port 18443 after SPA knock.