This SSL forwarding does not always work - what technique should I use?

[planetinse]

I'am using a ACL based on
IF NOT ssl_fc
then a Custom Action with
redirect scheme https

This does not work on some browsers at first visit
especially mac-os and safari (they get a 503, until they have hardcoded https once, after that it work automatically)

what should I use that always works?