The ability to provide tool access to an isolated endpoint on an as needed basis to an external ip/fqdn. This would allow us to place, for example, malwarebytes on the machine while it is isolated and still allow it to pull down definitions without adding it as accessible to all clients and tenants.