Split tunneling is the headline, but there's much more to look out for ...