A network engineer must connect two branch routers over the public Internet. The design requires that OSPF adjacencies and multicast video streams traverse the tunnel, while all traffic must also be encrypted for confidentiality. Which single tunnel technology, used alone, satisfies BOTH the multicast/routing-protocol requirement AND the encryption requirement?