Adding a "system connection" requires root permissions on linux.
Adding a per-user connection does not.
I can have our eduvpn website create a .openvpn file that I can import manually "per user" without root permissions. This should be possible with the client gui as well.