What is the primary reason that GET VPN is not deployed over the public Internet?

A.
because GET VPN supports re-keying using multicast only

B.
because GET VPN preserves the original source and destination IP addresses, which may be
private addresses that are not routable over the Internet

C.
because GET VPN usesIPsec transport mode, which would expose the IP addresses to the
public if using the Internet

D.
because the GET VPN group members use multicast to register with the key servers

E.
because the GET VPN key servers and group members requires a secure path to exchange the
Key Encryption Key (KEK) and the Traffic Encryption Key (TEK)