Install a mandatory access control for restricing SoftEther to network facilities only. This reduces the vulnerability surface of any softetherd exploit, which is an important because SoftEther currently runs as a fully privileged process.
