Modernizing Public Sector Network Access Beyond Legacy VPNs