[fix] Support httpOver* outbound proxying and make tunnel explicit

Based on discussion in #937