Move vpn recipe invoke to Vagrantfile

This request is part of a move of the include of openvpnc to the elife-vagrant repo to here, so it is more easily switched off at need.

The request must only be merged together with the equivalent request from that other repo.

There is a more around configuration to come....