Your VPN is probably doing way more than you need it to — here's what actually matters