We have configured VPN for Safari domains on iOS. Facebook.com is configured as Safari domain. So ideally VPN should be triggered when Facebook.com is opened. But we found that as soon as Safari is launched with any site, VPN icon appears although traffic is not sent to VPN. E.g. We opened Safari and opened cnn.com and it launched VPN.This gives end user feel that all Safari traffic is being processed. Our expectation is that VPN icon should display only for safari search domains. Is this expected as per Apple design or should I file a bug with Apple?