I guess the proxy would add both its own key and upstream keys, as is allowed by the spec; in a way the proxy key will act as the normal key and the true site key will act as a backup key.

The fun begins with report uris, it doesn't seem like there's a way to specify multiple of them.