The 1.5.1 release of Munki in a Box completes the work done in the Security branch, and is now the primary production release of Munki in a Box. This uses SSL Certificates + HTTP Basic Auth by default, and includes the configuration of the Server.app Web Server to do this. You'll need to BYO Certificate, but the HTTP Basic Auth process will be done for you.
In addition, this release includes the creation of autopkg overrides for all the packages imported during the initial run, which will make it easier to manage AutoPkgr in the future. Trust matters, so please read up on the autopkg trust settings.