closer to working, but we hang after vpn.sh, though it does run successfully -- needs better error handling if run with sudo (and no ENV{DOTFILES}