Nat punch is a big part of it, but so is key management/sync, and configuration management.