how do you do that for a multiple VPN setup (for work obviously) and that would need to route the connection to different devices, while working only during office hours and take into account the usual MFA crap?