Someone on IRC in #smartos was asking [https://freenode.logbot.info/smartos/20210205#c6800202] about how to turn on NAT in lx branded zones. I was pretty sure it should be possible, and found myself nerd-sniped [https://xkcd.com/356/] into figuring out the exact solution. I don't think I