The MTSA, at 46 U.S.C. ?? 70103(c)(3)(D), requires that a U.S. VSP identify, and ensure by contract or other means approved by the Secretary, the availability of security measures sufficient to deter to the maximum extent practicable a transportation security incident or a substantial threat of such a security incident.