Enhance the functionality of the kill-switch

Follow-up of #23 (closed)

Future improvements could include:

• optional app overrides RFC1918 overrides (for advanced users who are aware of the risks, perhaps tied to network connection name)
• when VPN is disabled, it should warn users to close sensitive apps first

We first need to discuss these proposals in detai before they become an actionable items.