add new flag FOREGROUND_SERVICE_TYPE_SYSTEM_EXEMPTED to start VPN service....

    <uses-permission android:name="android.permission.VIBRATE" />

    <uses-permission android:name="android.permission.WAKE_LOCK" />

    <uses-permission android:name="android.permission.FOREGROUND_SERVICE" />

    <uses-permission android:name="android.permission.FOREGROUND_SERVICE_SYSTEM_EXEMPTED"/>

    <uses-permission android:name="android.permission.POST_NOTIFICATIONS" />

    <queries>

        <service

            android:name="org.torproject.vpn.vpn.TorVpnService"

            android:exported="false"

            android:foregroundServiceType="systemExempted"

            android:permission="android.permission.BIND_VPN_SERVICE">

            <intent-filter>

                <action android:name="android.net.VpnService" />

import android.app.Notification

import android.content.Intent

import android.content.pm.PackageManager

import android.content.pm.ServiceInfo.*

import android.net.VpnService

import android.os.Build

import android.os.Handler

import android.os.ParcelFileDescriptor

import android.system.OsConstants

import android.util.Log

import androidx.core.app.ServiceCompat

import androidx.lifecycle.Observer

import kotlinx.coroutines.CoroutineScope

import kotlinx.coroutines.Dispatchers

    override fun onStartCommand(intent: Intent?, flags: Int, startId: Int): Int {

        Log.d(TAG, "service: onStartCommand")

        val notification: Notification? = notificationManager.buildForegroundServiceNotification()

        startForeground(VpnNotificationManager.NOTIFICATION_ID, notification)

        val notification: Notification = notificationManager.buildForegroundServiceNotification()

        ServiceCompat.startForeground(this, VpnNotificationManager.NOTIFICATION_ID, notification, FOREGROUND_SERVICE_TYPE_SYSTEM_EXEMPTED)

        val action = if (intent != null) intent.action else ""

        val isAlwaysOn =  (intent == null || intent.component == null || intent.component!!.packageName != packageName) && Build.VERSION.SDK_INT >= ALWAYS_ON_MIN_API_LEVEL

        if (isAlwaysOn) {