VPN privacy audits