[Security/Docs] Document trust proxy behavior for reverse-proxy deployments