bitmask-root: rip out all resolvconf code and simply rewrite all DNS packets to use the VPN nameserver.