This should be disable by using MDM profile, because for some customer VPN profile should be managed by MDM and should not be deactivated at user end. This will cause the security issues.