@dalias At a previous job, a coworker and I maintained a .so that you could LD_PRELOAD when running the corporate VPN client. It was a public repo on the internal git server. We never even got in trouble for the sort of open rebellion against the MDM junk because enough people understood working around the on-paper ironclad policy as simply necessary for doing any work.