Stories from the SOC: Mystery of the postponed proxyware install