use EC keys for authentication (phase out RSA)

this is a sub issue of the epic : #71 modernize openvpn service