Sure you can do with FCare only. I usually do.
UTM license for FAP-U? First time I hear of that. There used to be FAP-S APs which offered UTM offloading on the AP CPU, but not on a FAP-U or a regular FAP.
"Kernel panic: Aiee, killing interrupt handler!"