Multiple per-app VPNs using single configuration

if those apps are internal apps, it is better to consult with the app developer/architect teams.
the app integration connectivity shouldnt change every day or unplanned in production env.

for continuity, make the apm config to be part of change management process of those apps.