VPN passwords save when they shouldn't

[BloodyIron]

I use network-manager to connect to openVPN servers.

First, when adding a new VPN config, entering a login is required, and we are unable to save if we do not enter a username. This is a security flaw as we need the ability to enter login and password each and every time as an option.

Second, I enter a login username, but not a password. On first connection it asks for a password, but never again. I have never been asked for a password on the same VPN after entering it the first time. This persists across reboots also. This is a substantial security flaw, and this should be an option, not the default behaviour.

ProblemType: Bug
DistroRelease: Ubuntu 16.10
Package: network-manager 1.2.6-0ubuntu1.1
ProcVersionSignature: Ubuntu 4.8.0-53.56-generic 4.8.17
Uname: Linux 4.8.0-53-generic x86_64
ApportVersion: 2.20.3-0ubuntu8.3
Architecture: amd64
CurrentDesktop: Unity
Date: Sat May 27 21:35:10 2017
IfupdownConfig:
 # interfaces(5) file used by ifup(8) and ifdown(8)
 auto lo
 iface lo inet loopback
InstallationDate: Installed on 2017-02-18 (99 days ago)
InstallationMedia: Ubuntu 16.10 "Yakkety Yak" - Release amd64 (20161012.2)
NetworkManager.state:
 [main]
 NetworkingEnabled=true
 WirelessEnabled=true
 WWANEnabled=true
SourcePackage: network-manager
UpgradeStatus: No upgrade log present (probably fresh install)
nmcli-dev:
 DEVICE TYPE STATE DBUS-PATH CONNECTION CON-UUID CON-PATH
 tun0 tun connected /org/freedesktop/NetworkManager/Devices/4 tun0 3337e7b3-7794-4539-a5a3-0a534f60800f /org/freedesktop/NetworkManager/ActiveConnection/6
 wlp3s0 wifi connected /org/freedesktop/NetworkManager/Devices/0 notforyou e8f5ba42-91e9-4755-b1b7-0c030961f69e /org/freedesktop/NetworkManager/ActiveConnection/1
 enp0s25 ethernet unavailable /org/freedesktop/NetworkManager/Devices/1 -- -- --
 lo loopback unmanaged /org/freedesktop/NetworkManager/Devices/2 -- -- --
nmcli-nm:
 RUNNING VERSION STATE STARTUP CONNECTIVITY NETWORKING WIFI-HW WIFI WWAN-HW WWAN
 running 1.2.6 connected started full enabled enabled enabled enabled enabled