so that means exit nodes cant be "HA" right? like running netclient as a deamonset in a k8s cluster only 1 of the pods can? should? be an egress gateway?