I can use nmcli modify xxx vpn.data ... to change plugin-specific information. Must vpn.data always be the full set of options? Is it possible to change/add/delete only a single option?