This would ensure you couldn't tie an Identity to an activity\user on a service which is of course why it's not where they're going

The VPN provider should hook into the existing government identify service.