Unable to connect after restart if openvpn is not root

[robagar]

For safety, our openvpn server config contains these entries so that the daemon isn't running as root once initialization is complete:

user nobody
group nogroup

The Authy VPN configuration file /etc/openvpn/authy/authy-vpn.conf should be owned by nobody, but seems to get taken back by root on restarting the VPN. Client connections then fail because the openvpn process running as nobody cannot read the file.

chown nobody authy-vpn.conf fixes it, until the next restart.