So when you talk about option 3, are you talking about using a zero trust tunnel and setting your SSL/TLS encryption mode to Full?