PIA for specific address

Goal:  LAN-WAN with remote VPN via forticlient (currently just fine)  One or more specific internal IP's to use PIA L2TP vpn client setup on Fortigate for private browsing out to PIA servers.

I ran thru the following setup and borked remote vpn access.  There is a missing piece here and I'm either overlooking the obvious, overthinking or both.. 

https://www.privateinternetaccess.com/forum/discussion/21071/fortigate-l2tp-setup 

Anyone done similar?  Care to point out the piece I'm missing.  Had not done much VDOM setup in the past and I wonder if this is the "part" I'm missing.  I got all setup per the instructions but .... well.. 

LGSONE