Amazing... it works! FYI per blossom spec it is required to run in the root path, i.e. you would need to forward /* to the blossom implementation, omiting the /blossom folder.
I'm wondering how we deal with HTTPS over fips. Most web browsers / web apps choke on mixed (HTTPS + HTTP) content.