So the answer to this is...it can't be done. Hibernate currently will not know anything about the properties in embedded objects, only the IDs...so account.pran works because "pran" is mapped as the ID, but account.proxy does not because "proxy" is mapped as a property. The only way to get around this seems to be to add a sqlrestriction, like this guy did:
viewtopic.php?f=1&t=997933&p=2414277#p2414277...it works, but looks hacky and i haven't found a way to make those bind variables yet. Hope this helps someone.
Pedro