yep, and osquery config. we have a reverse proxy bound to a few domains in front of a few services that uses SNI to figure out which service requests are for.