Nope. No proxying here. I've just ended up excluding this particular update, as it seems to apply to Server 2016 Technical Preview 5 anyway. I achieved this by going to the properties of my auto deployment rule, and on the "Software Updates" tab, ticking "Article ID" and typing "-3172989" as the value. This excludes KB3172989. The Automatic Deployment Rule has since run successfully. Screenshot included.