NSA advisory on VPN security highlights need for zero trust