that gets closer to the solution, but I think there is still a limitation. All the ingress gateways would need to have the same public key