Good job! Might have closed a side leak there. Next step might be to to make sure certain TCP packets under a certain classification gets encrypted together with data traffic?