proxy + credential caching goodness