We will not find an answer until you explain what you mean with "kill switch".
Well, tunnels via FC need to be opened manually (usually), so the user decides when to connect. Are you thinking about the VPN gateway side? How to disconnect a particular VPN user manually from the gateway side?
"Kernel panic: Aiee, killing interrupt handler!"