Pardon intrusion ...
if 'clients are likely to NOT be happy about ...'
Don't let them read the following or anything like it! :|
https://www.infosecurity-magazine.com/news/fbi-dont-trust-https-or-padlock-on-1/
Aside from Moodle roles and permissions, what of the server/network does the moodle run upon/under/among?
Granted ... not helpful ... so -1 on that score in this context, but in real world?
'SoS', Ken