The OpenVPN server configuration is too basic and does not support usernames (and passwords). So basically you export the configuration, give it to someone else and that person may send it to someone else and they all connect with the same configuration.

Any workarounds to setting up usernames?  I think it requires TP-Link to release a new firmware, but I really think it is mandatory to implement something like this. 

Also if I want to invalidate that person's access I need to remove and recreate the VPN server -since the certificate is unique for everyone and you cannot renew it -that's another thing that should be added. And maybe the option to disconnect remote clients -without shutting down the whole server.

Thanks,

Diego.