MITM proxy turns out to be missing important features. Instead let's migrate to Squid proxy for now and allow configuring from domain whitelist. Squid proxy should be using transparent mode.