Client-based tags (user.action)

{-limit-connect}
CLIENT-TAG:^no-CONNECT-whitelist$

{-client-header-tagger{http-method}}
CLIENT-TAG:^no-POST-whitelist$

{+forward-override{forward-socks5 127.0.1.2:3333 .}}
CLIENT-TAG:^forward-through-ssh$