Drop privs after initialization
Add a CRL to the OpenVPN configuration
Use better permissions