The ability to nest proxy servers using TLS would be sufficient for me.