you don't have to declare all your urls as secure  pages, you may give a pattern say, /my-path/* and after the container reaches that page, all other pages will be secured as well

however, it's not possible to locate the URIs from database, but if it was possible, the performance would decline even worst than current configuration.