I was interested in setting up something similar (as a novelty) to cheaply bypass an untrusted network.

Untrusted Wifi > RasPi Client > OpenVPN > AP

How would you go about routing the VPN device between client and AP?