hardened profile USE: +net-proxy/squid tproxy