Warp tunnel all

Include/exclude does not compute. I am used to “tunnel all”. How can I force all external traffic on my client PC down the tunnel?

I have a website that knows when I access from my HDQ public address. I have a remote user with Warp Zero Trust running. When he accesses the website it is from his home LAN(wrong public address). I need it to traverse the cloudflared tunnel using WARP. Help?