US11516260B2 - Selective Policy-Driven Interception of Encrypted Network Traffic Utilizing a Domain Name Service and a Single-Sign on Service