Managing Access Control in Virtual Private Networks