14.2 NetworkManager-openvpn kill switch?

I am thinking about getting a VPN going on my 14.2 machine. It is easy enough to do with networkmaanger-openvpn, but I was wondering how you guys set up a kill switch so that if the VPN drops my IP address and such does not leak?

Thanks