Allow Choice of VPN Protocols to Allow/Deny per Tenant/Tag/Team/User/Device

It would be great to let us be able to pick what VPN types we want to use/allow. Maybe we don't want to use Secure WireGuard or for some sort of compliance we need to not allow OpenVPN. Currently we're being forced to adopt all 3 types.