proxy: always invoke `server.authenticate()` when present
bin: don't invoke the child process when no "Proxy-Authorization" header is given