It still has two problems:
1. What happens if an user has an ip which is flagged as VPN at any service, but he isn't a vpn user?
2. I also have to create a specific deal with one of the VPN detection sides. I can't just buy premium and use that for every server.