Tried adding a L2TP VPN connection also. If I manually disable All user may connect to this network (in General configuration tab), the connection can be save and it is successful. So I think there are 2 different topics here: 1. The network manager has been changed to always ask for the root password by default when creating new connections. This is wrong. 2. The openconnect VPN plugin does not find the necessary libraries to offer the user the token authentication window. This is also a regression.