1. nginx with the http_proxy module doesn't by default (or ever) accept CONNECT through http, so https should be used. -E is added for this.
2. Many/most users would use self-signed certificates. -z is described for this.
This README change would potentially simplify the setup process for users.