Which two options are valid for configuring IEEE 802.1AE MACSec between switches in a TrustSec network?