After consideration, not likely to fully implement this since the reliance on OpenVPN for disconnection is not accurate and there are free software that supplement this. Adding another layer which in fact would be a miniature firewall would be problematic esp for those with existing firewall solutions. We are looking into an existing software solution for Mac.