Hi @pclark, and welcome to the Duo Community! Thanks for asking this question here. We love to see these types of best practices discussions in the forum. I’m giving this post a bump in the hopes that some other Duo admins can chime in with advice for you.
This is beyond my own personal range of expertise, so I can’t really help you myself
but I’ll search our support cases to see if I can find any advice for you.