hardened profile USE: +net-proxy/squid caps