Smart work security tips: how a VPN can (and cannot) help