What security concerns are there related to allowing a CPN client on a desktop within your “secured” network to connect with a VPN host on someone elses network through your firewall?