In the IPSec VPN transmission mode, which part of the data packet is encrypted?