Explicit Proxy (draft-rpeon-httpbis-exproxy)

Hi,
I have read the draft, the primary question I had was what is the mechanism
to transfer the decryption key material from user-agent to configured-proxy
in a secure, authenticated and trusted manner immediately after tunnel
establishment, and how are you going to do that prior to any traffic
traversing the tunnel?

thanks
-chad