VPN can be restricted to a terminal, app, virtual machine etc. I used this analogy because normally we dont trust VPN to delete the logs.