an openvpn role