appreciate it tigs.  i'll check it out in a virtual sandbox environment so see if I can exit traffic on a more discreet layer 3 identity