Shuffle proxy-protocol to wrap TLS-on-connect startup. Bug 2018