Section 10 begins, "When the VPN tunnel is IPsec". This creates whiplash for
the reader. What VPN tunnel? Were we talking about VPN tunnels? I even searched
back in the document to make sure, and nope, this is the only place the string
"VPN" occurs. I assume you mean something like, "when the client is using a VPN
tunnel, and the tunnel is IPsec". Please, update the section so you don't start
in the middle.