added support for bind-to-device, via a remote service, for VPN routing exclusion (android/linux only); associated refactoring of dialers and conns