I would second this request, and add a request for control of external client IP address assignation via the UI before configs are deployed to users