which additional configuration parameter is needed under the get vpn group member gdoi configuration?