@mint there may be a couple things we can move out of MRFs but I think this discussion has to happen to make everyone understand exactly what these do and that they're basically a firewall/ACL/content normalization policy set by the admin and really shouldn't be possible to bypass for security purposes