- Move VPN helpers from Passepartout - Initialize VPN.shared explicitly - Expose internal *VPNConfiguration constructors