Forward messages are anonymous: If the second header or the payload are tagged in the first leg, then the second header is unrecoverable. If tagged in the second leg, we've already gotten anonymity from the first.