use simple list for Kitkat's broken VPNService