VPNs should use Public-Key Cryptography instead of long codes