Know your split-tunnel "gotchas"