ohhhh, ok.. can i allow it to connect to 'random relays' over my default route if i trust my own netsec, like a vpn? or tor only?