I recently ran into an issue where I had to run two VPN interfaces on the same router, only to discover the following issues:

1) There is evidently no way to configure a split tunnel. 100% of traffic is first-come, first-serve.

2) I can only route to the WAN. There's no way to forward all traffic from, say, port 22 to one specific interface, and 443 to another.

I suggest expanding routing to be more versatile, similar to the options under Access Control.