@doot @neil i think you covered similar topic on your infosec blog?