A non-200 answer to CONNECT was returned as the response, so a proxy, or anyone on the plain leg to it, could answer an HTTPS request as if the origin had. Fail the request with Error::ProxyConnection for anything but a 4xx or 5xx refusal.