Support sharing "Allowed Apps" setting between multiple profiles

[infinity0]

When installing many apps, some of which you trust and some of which you trust less, it is very inconvenient to have to repeat your "allowed apps" settings across multiple profiles for when you want to switch VPN provider, but your idea of which apps are more or less trustworthy remains the same.

This could be done by separating out the "Allowed Apps" setting into a separate concept of an "app profile", then allowing each "VPN profile" to select an "app profile" in a non 1-to-1 mapping.

[e-t-l]

To add, if this would allow the user to manually enter the package name of an app to trust, that would be a very straightforward workaround to #1018.