nice demo 
and you are absolutely right:
outbound tls-traffic needs more and more attention 
there seems to be a - way more loved - in-house project
of the same base-idea i guess as an ignorant user 
are you aware of:
what is your opinion about RPZ 
can these two be compared 