openvpn - support customizing --fragment, and set default to 1400

Requires this client to test: https://github.com/leapcode/bitmask_client/pull/784

Also, if running from source code, you will need to manually copy bitmask-root to /usr/sbin/bitmask-root