Can contractors use a Layer 9 private VPN?

Give freelancers a proper tunnel and dedicated IP for client systems that require allowlisting.

Operational hygiene

Rotate configs when contractors leave; keep an inventory of who has profiles.

One node per contractor?

Not required — size the node for concurrent use, or separate nodes per client sensitivity.