/var/lib/openvpn/ is in network-manager-openvpn 1.2.8-2.
This file is owned by root:root, with mode 0o755.