A trusted proxy isn't good enough


These proxies are trust/performance bottlenecks.

Add a constraint: want to be safe from a compromised middle node too.