What are you using for encryption? CRES/IEA? or is this just flagging to require TLS?
If its TLS, would it be easier to just set the box to TLS as preferred?
Or are there certain domains that you need to do this with, and you can set up a policy for TLS to be required for those?