Yeah. Sometimes the right answer is "no." because that allows them to go back to the security team and say "vendor says it can't be done".