User auth for web proxy servers blows-- no support for encrypted channels built-in, so you end up with a hacked out-of-band solution. Lame!