question: if all your clients are on an internal private network, why do you need an overlaid encrypted network?