Don't send Proxy-Authorization headers until we've received a `407 Proxy Authentication Required` response from the server. Fixes #2910, which has an additional component about using existing kerberos tickets that should be moved to a new trac ticket. committer: John Bailey <rekkanoryo@rekkanoryo.org>