So there would at least "need" to be some way to update the configuration. Preferably it would be able to update all of it (including stuff like Egress gateway etc), but at the very least propagating the list of external clients would be necessary (otherwise there's no real value to all of this)