Please let us use DNS names in the addresses instead of doing scripts to resolve the IPs. It would make a lot easier.
Also, please allow use to use the WAN IP on the mikrotik without having to use scripts to get it, take out the mask, and then insert it into the peer and policies.