'reneg-sec 0' is not a good idea, and is not necessary in OpenVPN >= 2.4

[wrossmann]

Setting your tunnel to never renegotiate is a security problem for long-running tunnels, and OpenVPN added the auth-gen-token config parameter specifically for cases like OTP authentication. In short, after authentication OpenVPN will generate a token to be used for renegotiation in place of re-sending the username and password.

Please add a mention of auth-gen-token for OpenVPN >= 2.4 in the README.

[evgeny-gridasov]

Thanks Wade,
Would you like to raise a PR to add that?
I don’t want to take credit for other people’s contributions.
Alternatively, I could make that change myself.