Indeed not. That's not what I said. I don't even want them talking out to the internet by default, which is why I have a separate subnet with a different set o

Indeed not. That's not what I said. I don't even want them talking out to the internet by default, which is why I have a separate subnet with a different set of firewall rules that only allows whitelisted outbound connections.