OPNsense 19.7 routing specific traffic (clients) through OpenVPN client

[dedabrane]

Hello everyone,
first I just want to say that I love OPN though I haven't been using it for a long time.
I installed 19.7 and the initial setup went smooth, clients have internet access.
Setup is pretty simple:
- 2 interface ports (WAN & LAN)
- WAN connected to ISP, static interface IP, static GW IP
- LAN connected to switch, static IP, DHCP enabled, DNS resolver enabled, specific clients have reservations and aliases

Now, I am trying to setup a OpenVPN client with NordVPN to route only those specific client's traffic through the VPN connection.
For the sake of saving some time we can assume that the client VPN connection is configured because I have set it up multiple times and it always "works", connection status is always UP.
One part of that setup I am not completely sure about though:
what options need to be "ticked": "Don't pull routes" and "Don't add/remove routes"?

I found numerous guides saying how to setup similar situations, but I can't get any of those to work.
Maybe it's because most of them are on an older version or something.
Even after all is configured and the internet access works, all of the clients still have the ISP IP address.

Can someone please write me a step-by-step guide for 19.7/20.1 with NAT/firewall rules and everything needed, rules ordering etc...
I will install an older version if needed 

I feel like an idiot trying to set this up after reading tons of guides already...

Thanks a million!