VPN Client, Profile, and Service: Debug the Right Layer

A connect button, a downloaded file, and a service account can all be called “the VPN.” Separating...