good point! programmable network policy and a gateway to prevent secret exfiltration are on the roadmap.