But what is the problem with authenticated users tunnelling data? After I authenticate, I might want to run VPN (e.g. IPsec for example)