alternate scheme for openVPN