Comment 6 for bug 278309

I discovered that, if you add specific routes to the VPN definition, it preserved the existing default.

So, click "Routes" and add the VPN's subnet information to the table. You only need to fill in the IP and prefix.

I would still prefer to see this option explicitly exposed.