Exposing the proxy redirect option to make it more easily set.
Adding a proxy rewrite to hopefully make things work, and moving the shadow group stuff into puppet.