Turns out the vars file must be in the same folder as the rest of the
easyrsa utilities. Whoops!