The NSA and CISA have released a document on how to harden your VPN.