I'm not against new wiring, but if it isn't an option, can you protect the entire subpanel with a 2 pole GFI?