If NAT is security, double NAT must be double security! 
@catsalad imagine full-cone NAT