Currently only possible when proxying through a TLS-terminating web server. Since `gnutls` is already a dependency, this should not require any more.