How to use different network interfaces for different users?
Try something like:
iptables -A OUTPUT ! -o tun0 -m owner --uid-owner 1001 -j DROP
where 1001 is the user id of vpn.
Translate iptables into whatever firewall you're using on CentOS 8.