additionally, within the OPNsense web proxy setup, I've implemented a transparent proxy configuration relying on a Certificate Authority (CA). Unfortunately, this necessitates the installation of the CA on every client device to enable internet access. Is there a viable alternative method that eliminates the need for deploying the CA to each client?