consider 2fa options
https://perfecto25.medium.com/openvpn-community-2fa-with-google-authenticator-4f2a7cb08128 This is a good one. we can probably adapt manage.sh
https://perfecto25.medium.com/openvpn-community-2fa-with-google-authenticator-4f2a7cb08128 This is a good one. we can probably adapt manage.sh