This is crazy. Might be time to revist "chaffing" and see if it's possible to warp that into working as vpn and/or tls/ssl wrapper/replacement? (Or of course, due the usual thing and work politically to get crazy legislation off the books....).
https://people.csail.mit.edu/rivest/Chaffing.txt