Nail main OpenVPN tunnel to tun0 so it matches LED3=tun0 from /etc/leds.conf
removed /etc/netplug/netplugd.conf from skeletton to avoid interactive questions during netplug install
Write /etc/netplug/netplugd.conf after install. Kill dhclient that was started by netplug