Egress proxy bypass remains possible through one legacy hostname

Most outbound traffic now uses the secured path, but an overlooked legacy name still resolves around the expected control point.