add rule for openvpn
reduce dependency on lsb modules, rather use the builtin facts