I run openvpn and I noticed this morning that it wasn't running. The pid file still existed so presumably it didn't shut down cleanly. The problem is that normal routing had been restored. Is it possible to make it fail-safe so normal routing is only restored after a manual shutdown or after manual intervention?