One more obstacle: It turns out that IndexedDB is not persistent in an insecure context. And setting #unsafely-treat-insecure-origin-as-secure has no effect on this. If I had not learned about ngrok thanks to nneonneo, I would have a real problem now.