Refactor out VPN code
Right now, all the EIP/VPN code is mixed up with the rest of the Bitmask code, we need to start cleaning up the code and moving each component's logic apart is a good start.
(from redmine: created on 2015-12-16, closed on 2016-02-13, relates #7882 (closed), relates #7897 (closed))