A network architect is troubleshooting L2TPv3 tunnel security because the underlying network is untrusted. Which two L2TPv3 features should the architect deploy to resolve the ongoing issues? (Choose two.)