How is remote access to 1C organized: do you connect via VPN, how are access rights arranged?