Update:
Woohoo! this is now supported in SlickStack. Just change:
CLOUDFLARE_AUTHENTICATED_ORIGIN
option to value true
in your ss-config
Then reinstall Nginx config, ss install nginx config
Ensure this file exists afterwards:
/var/www/sites/includes/authenticated-origin.conf