tun module and OpenVPN

I've been trying to use OpenVPN with cernvm4 to allow VMs to join a VPN provided by the service which is managing their workloads. Two requests have come out of this:

1) Can you add the tun.ko kernel module to your kernel builds. tap.ko is already there but to get OpenVPN working in TUN or TAP mode I had to install a copy of tun.ko I built myself (I built 4.14.44 to get it.) For me it was just a case of adding CONFIG_TUN=m to kconfig-cernvm.x86_64 in your cernvm-kernel repo.

2) Can you include OpenVPN itself in the cernvm4 OS. The version in EPEL works fine for me but it would be easier to have it available without having to do a yum install.

Thanks,

 Andrew