The kube-controller-manager was forced insecure to land the rebase. It must be switched to secure.
PR: https://github.com/openshift/cluster-kube-controller-manager-operator/pull/207
Checked env of latest payload 4.0.0-0.nightly-2019-04-05-165550, above PR does not yet land in. Will check again against next-time payload.
*** This bug has been marked as a duplicate of bug 1691055 ***