Having had the VPN off for a bit I can report another bug on 4.6.0
When the VPN client is off the domains defined in PBR cannot be routed or even DNS queries performed.
nslookup whatismyipaddress.com
;; connection timed out; no servers could be reached
nslookup f1tv.formula1.com
;; connection timed out; no servers could be reached
I expect these domains to be routed over the main wan when the VPN client is off