socks-proxy-agent: pass `secure` flag when no `new`