consider reordering PT/proxy phases

A pluggable transport can itself use a firewall-bypass proxy, so maybe the progression should go more like

  1. conn_pt
  2. conn_proxy
  3. conn_proxy_done
  4. conn_pt_done