In this setup the "kill switch" works in tandem with the VPN server failover logic. Maybe a netns would be good for redundancy.