I find the easiest way to set it up is using docker. Running openvpn or wireguard in a docker container (they often have a killswitch built in), then having my transmission and other docker containers use it as its network. The docker image I use for wireguard with PIA is thrnz/docker-wireguard-pia