add pac-host config;
change pac content when listen in ssl type, let all connections go through apn-proxy;