A network administrator is deploying a centralized authentication solution for logging into the company's routers and switches. Management wants each administrator command to be individually authorized and logged, and requires that the entire session—including all command-level authorization—be encrypted. Which protocol best meets these requirements?