How is the «web/secure/use_in_frontend» option implemented and used?

See also: