Let's say a VPN uses a certain layer of the OSI reference model to transmit an encrypted data payload that already contains a full second set of packets. What layer to use?