is there any reason you can't just use Network Manager OpenVPN directly for this? As this will ensure that you use our openvpn binary, and that NM is
able to properly set up gateways and manage /etc/resolv.conf itself (as it currently does)