Comment 11 for bug 372358

@Andres:
About $script_security, yes, we also need it to be passed as an option.

And yes, something similar to what you propose just might take the best of both worlds : use start-stop-daemon to avoid failure on start when a PID file is not deleted, and still have our $script_security and boot-time password bypass.

The only issue is that I'm not sure (at all) start-stop-daemon would pass the </dev/null to the daemon and that it would work as intended. So yes, it needs to be thoroughly tested: setup a password-protected VPN, reproduce success to boot with current ubuntu, upgrade to the merged version and check if it would not restore the bug (boot process blocked by openvpn asking for a password).