Where is client traffic decrypted in a controller-based wireless network protected with WPA2 Security?