it's not clear at this time whether we'd enable proxy as requested, or keep the s3 vpc endpoint accessible without proxy , but increase verifications to fail fast when endpoint isnt set.
In any case, the necessary work can be done after 4.11 code freeze: BZ associated