Currently, we have a headless task for

• installing the entire OpenVPN server as well as
• adding a single user
  The only thing that's missing right now is the headless revocation of client certificates.

This should be added as it allows to automate another task, especially as reusing existing coding techniques should make this fairly straightforward.

And while we're at it, we should also document the new feature. Because documentation matters.