The VPN configs are likely per-user, so you may have to set the override options to runas=currentuser. I have some tips on that at