fix upgrade from 1.x.x version vpn mode
explain functionalities by clicking arrows
monkey patch ssl separately; use ss for https
add china_shortcut_enabled and direct_access_enabled