which additional configuration parameter is needed under the GET VPN group member GDOI configuration?