vpnaas initial draft