Allow only Virtual Private Network (VPN) connections for endpoints

The endpoints should not be able to connect in an insecure way, i.e. without strong authentication and/or without real-time encryption of communication.

A VPN allows users to have permanent and transparent encryption.