I think what I might do is install PolarProxy in Transparent Forwarding mode and point readers to the guide for doing so over here: https://www.netresec.com/?page=Blog&month=2020-01&post=Sniffing-Decrypted-TLS-Traffic-with-Security-Onion and just adapt it to the lab instructions I gave them for SSLProxy. I'm more interested in doing a full-tutorial in setting up PolarProxy in HTTP Proxy mode, and show how to feed Suricata that data, as an alternate lab setup.