We are proposing to copy vendor certificates vs allowing users to “accept”. This is a security control measure on our part to prevent users from being able to accept any/all such from sites they visit that are non-business related. Does anyone have experience with this or similar methods?