Here is our goal: In order to support offsite Mac workstations, we would like to create a single, shared VPN account that our users can use to log into VPN. However, we want to restrict this shared VPN account to allow only VNC traffic, so we can d...