I'm always hesitant to trust these things after one of them turned off CRL checking because external connectivity = bad!!1