I will add canonical links to the pages when people like you have an SSL certificate. This should force google to only index the https version and give you the search engine ranking benefits without actually forcing people to browse the https version when not necessary.
you can read about this solution here: https://www.creare.co.uk/http-vs-https-duplicate-content