The VPN provider should hook into the existing government identify service.