Mitigating NIS lack of security

I've been wondering if it's possible to mitigate NIS's by design lack of security.
For example, Kerberos can be used to address the passwd and shadow maps.
But what about all the other maps?

Is IPSec capable of providing a secure channel just for NIS traffic on the wire therefore preventing its communication from being intercepted and tampered with?

Thanks in advance.