all: separate our changes in invirt-ssl-proxy.patch from upstream