I've used "--route-nopull" together with specific "--route" statements to work around VPN setups that didn't work under specific circumstances (the server pushes a heap of routes, some of which caused problems in my setup [*], and I only wanted to reach a specific subnet via the VPN).
+1
I've done exactly the same thing for exactly the same reasons, though I also use setcon as well (I have my own SELinux policy, so it makes sense for my own configuration/interfaces used).
