RFC: Putting smart-proxy behind Apache

It would simplify hardening in terms of SSL protocols and ciphers. Now there’s a single language (Apache config) to set it. We also recently learned that the Ruby version is relevant and was limiting us (Ciphers Inconsistent with Documentation).