This should work. I'll implement it and see what happens.
I guess I should have elaborated a bit more earlier....my only focus is on the servers. Admins are the only ones that have access. There should be no browsing from the servers. That's the intent of the check. Browsing from the server is just asking for trouble.