use exec to spawn openvpn
pass gateways to firewall up
typos fix
use random dirs for management socket
use bitmask-root with pkexec