I want to have everyone sign into devices using their company usernames that are stored in Active Directory. RADIUS doesn't help because the credentials are sent unencrypted. What are some options for encrypting credentials traveling from a router to AD?