But, if you have to do it, do it right. Make sure the outer later is SSL, which you can accomplish with OpenVPN or STunnel.