Allow proxy features to be explicitly enabled for http and https

[evgeni]

Originally posted by @ShimShtein in #309 (comment)

Right now we only allow "true" and "false", which means "enabled on all ports" and "disabled".
When we add provisioning features, we'll need to allow some features on http while most should remain https-only