well the PAW is nothing than admins at least putting their browsing into a VM (which costs round about 0€...). And seriously I never thought that doing else was a thing. But hey, apparently I am too far removed from sysadmins...