Yeah it's kind of embarrassing but in my experience the number one rule of VPN kill switch schemes is that they will fail to trigger. Sometimes twice, after you fix the discrepancy that caused it to not trigger the first time. Fucking docker being too smart for it's own good... Me being too dumb for my own...