document transparent HTTP proxy interaction

A DNS client that tries this in the clear on port 80 will likely fail because of rampant transparent HTTP proxies.

This probably needs to be documented in the draft.