> With a proxy, the assumption is that there are extant protections. Aha. I've caught a clue now. I'm conflating the two use cases: the case of IIS-style servers that have no env var capability, and the case of a proxied server. Thanks for the explanation. - Andy.