Auto connect to a VPN server with encrypted password, also add more route line without 'input password' many times
echo "password" | openssl aes-256-cbc -a -salt
and input your password to encrypt
sudo setcap cap_net_admin=+eip $(whereis route | awk '{print $2}')
tforticlient
and input your password again to decrypt