when designing IPSec VPN?

IP multicast packets when designing IPSec VPN?

A.
IPSec forwarding using tunnel mode

B.
Encapsulation of traffic with GRE or VTI

C.
Additional bandwidth for headend

D.
IPSec forwarding using transport mode