The goal would be to get balance between the two. You can tune it with the '-C' switch or the 'CompressionLevel' option. You might try using another cipher, but I don't recommend it. Any experiments on it are welcome. I try to cover here the vulnerability issues arising from this particular setup and VPNs in general.
Any comments are warmly welcome.
Well, I'm excessively using sudo. I believe it's still safer than using setuid bits. It's still a backdraw of Linux that it hasn't got more fine-grained access control. What is worse, there are shell scripts which are getting called through sudo. It can be configured by user's .ppprc.