Won't the certificate headers still be visible to peeping toms?