Learned how to whitelist Mac kernel extensions via configuration profile today so I think we're actually in decent shape for deploying the new VPN software to our Mac users without requiring direct technician assistance.