ovpn: ensure DHCP doesn't override our default route (fixes TAP+DHCP)
Updated documentation