I do transparent on mine, to save effort configuring proxies. There is autoconfig, but some clients don't support it. Some clients don't even support entering a proxy server.
... and I don't proxy https. If I want control over who gets out, I use authpf.
