How to Add DNS Filtering to Your NAT Instance with Squid (2016)

Does this limit who can connect to it anywhere? It looks like it results in an open proxy, albeit with limited destinations. Or maybe there's some "verify peer" type functionality such that clients without the right cert are dropped?