new CTProxyAwareness and related logic to abort when backend doesn't send an acceptable SCT