Audit safety of whole-device (always-on) vpn mode