documented "trust proxy"