VPN on Workload or Namespace

I am wanting to set up a VPN such as ExpressVPN to work with some containers rather than the whole system. I would be able to use it at the workload, namespace, or project level. I have tried to Google this, but have had no luck in doing so.

Would anyone be able to help get me on the right track?

have no idea how to use VPN on something specific but i was wondering this too a while back. also, as you, google search gave no answers, wondering if someone might know. going to prepare side dish. will ask my friend as he knows it all much better than me.