Only reference the COPYING.MIT as it is unlikely to change in the next upgrade.
This way I just need to install sysmocom-openvpn-config and copy a matching key to the device for the VPN config. The configuration file is marked as a CONFFILE, this means that modifications to it will not be lost during upgrade.