On a better note: Yesterday I was able to write an on demand VPN configuration profile for my Mac which mostly worked and once I’ve switched from a shared secret to certificate it will automatically launch the VPN if I am outside of my office or home wifi. Yay!