3 - one part of the self-test suite ("make check") needs to be adjusted to cater for the tightened script security. Patch attached (against SVN) - it also adds retrying if the addresses are in use. Note there are two "svn propedit" or "svn propset" required for an additional --down script - see attached patch
This has been merged in -r3217 http://svn.openvpn.net/projects/openvpn/branches/BETA21
James