android: Exclude configured subnets from the VPN