Tristate the network access switch

(Actually for VPN)

I don't remember who exactly did this - I thought CalyxOS, but this is certainly not mentioned on their website. Yet it'd be nice to have per-app network switch not just proxified/unproxified, but proxified/clearnet/offline.

It will help with the principle of least priviledge, reduce ads in apps, etc.