Guidelines for mandating the use of ipsec