a vpn policy should address which authorization methods are permitted on the system.