Comment 2 for bug 126911

That clearly fails the use case I gave because it requires much more than 'bzr serve --username --password'.

bzr:// is a registered internet protocol, we should make sure its solid enough to use as one.