Most platforms now have compatable versions of IPSec to use, setting this up is a one time deal and then all the traffic between you and client is secured. Simple, elegant, secure, and best of all, very little maintenance for both you and the client, as well as very little overhead.

"Nothing is sure but death and taxes" I say combine the two and its death to all taxes!