I think the way to go here is implementing a "full-mesh" VPN network through your 3 Internet entry points. I think that answers the feasibility. Adding VPN client is no problem either as long as you make sure that their "policies" will be delt after ...