Our machines are tied to users, and I was finding deploying an unsigned config file was a tad too dirty for my liking, and for security, it's a lot easier not give out the mobile config file.
I've come up with a more "self service approach" where it relies on a config file (we were already writing info to) more info below.
https://github.com/rderewianko/JamfScripts/tree/master/SelfServiceVPNDeployment