Support for fully transparent proxying including man-in-the-middle on TLS connections

Clients do need to send the SNI value in the TLS ClientHello which most modern clients do these days