proxy: all else being equal, prefer fd passing over proxying