Android NAT-T keepalive offload bypasses VPN lockdown

https://mullvad.net/en/blog/another-way-to-leak-traffic-on-a...