It would be better in our case if we could specify a list of domains that are decrypted rather than only being able to specify exclusions. So it would be the option to do the reverse of what we have now. "Only decrypt these sites."