Ask HN: How to safeguard VPN config on a device

We have a Linux based device that we give our clients to avail our services. To connect to our internal APIs, we allow uploading OpenVPN config (which we generate). The problem is that anyone with access to the device can easily copy the config and connect to the network. Is there any way to prevent users from viewing the file?