vpn: resolved some logic confusion