lightweight proxy so that multiple mutually untrusted bbb frontends can use the same backend without interfering