Route Not Specifying https, Return 403 Forbiden

When I create a Route object, and only set protocol to http,not specifying https, but Kong will still pass the request to the upstream service. I want to response 403 forbidden instead.Anyone know how to configure it?

Kong Version: 1.4.2