A security administrator is adding a NAC requirement for all VPN users to ensure the co requirement?