be able to turn the VPN before updating the provider.json
So we can get to the VPN without the need of DNS working and we kind of anonymize the provier.json request.
This might be tricky on how to do it from bonafide. Do we need bonafide to know about the status of the VPN? Should we hook the bonafide service into the VPN service and update the provider.json as soon as VPN is up? What about non-VPN providers? And if the provider.json doesn't work and needs to be updated to turn on the VPN?