Feature/port vpn

• the commands are only available through the CLI right now
• intended as a quick port to start assessing the feasibility of going with it in the next release already
• many smells obvious now that we've removed the signal-hell. Please indicate whatever you see fit for better design of the many many layers of indirection from service to process.