Wait till you see how M365 does management around iCloud relay makes it real fun troubleshooting suspicious login parameters...