VPN attack surface