An authnz aware egress proxy that also puts guard rails on MCP behavior?