When you add a new PSN for guest access services, which two options must be enabled under deployment settings? (Choose two.)