Mikrotik PIA Over IPSEC

/interface l2tp-client add connect-to="us-east.privateinternetaccess.com" user=xxxx password=xxxx ipsec-secret=mysafety
/ip firewall nat add chain=srcnat out-interface=l2tp-pia  action=masquerade
/ip firewall mangle add src-address=192.168.10.0/24 action=mark-routing new-routing-mark=to-pia
/ip route add dst-address=0.0.0.0/0 gateway=l2tp-pia routing-mark=to-pia