Because

The ./deploy script needs to be connected to VPN in order to run the Rancher workload command.

However, the build and push steps do not need to (and should not) be executed through VPN because:

• Getting and pushing data is inherently slower than without, particularly for remote connections
• Passing large volumes of data through VPN can slow the network down for everyone
• If the network is already slow (or down) it could delay or prevent us from deploying

Done When

A developer can deploy from outside the VPN.

Related to #9, but for manual deployment.