@Mark to check if the endpoint needs patches? Yea, that would require generating network traffic to a third party (Apple), that may necessitate doing in an extension.