Let's figure out and document how to use GSS proxy with Custodia. I assume it's just an additional env var and a small piece of configuration.