* changes: Ensure all VPN runners clean up state when exiting Enforce restricted user, getConnectionOwnerUid checks