1 - --script-security is documented in openvpn --help,
but not in the manual page.
Really? I see the documentation clearly added in ./openvpn.8:
.\"*********************************************************
.TP
.B --script-security level
This directive offers policy-level control over OpenVPN's usage of
external programs
and scripts. Lower values are more restrictive, higher values are more
permissive. Settings for
.B level:
.B 0 --
Strictly no calling of external programs.
.br
.B 1 --
(Default) Only call built-in executables such as ifconfig, ip, route, or
netsh.
.br
.B 2 --
Allow calling of built-in executables and user-defined scripts.
.br
.B 3 --
Allow passwords to be passed to scripts via environmental variables
(potentially unsafe).
.\"*********************************************************
.
James