check_vpn: smarter device allocation, core functionality