Do you allow them to do where they decrypt your traffic and use their certs? Anyone allowed to decrypt traffic to monitor what my node is doing sounds scary. Even from the meta data angle.