Stay Thrifty, Stay Secure: A VPN-based Assurance Framework for Hybrid Systems