just amazing - good work!

...and wonder what kinds of settings "restrictive regimes" will use

I could imagine stuff like com.apple.voicemail.imap use SSL => false