When designing IPSec VPN?

IP multicast packets when designing IPSec VPN?
A. IPSec forwarding using tunnle mode
B. Encapsulation of trafic with GRE or VTI
C. Additional bandwidth for headend
D. IPSec forwarding using transport mode