diff --git a/openvpn.py b/openvpn.py
index 534c431..c5894d2 100644
--- a/openvpn.py
+++ b/openvpn.py
@@ -75,7 +75,8 @@ class Openvpn:
         if self.status == IDLE:
             self.status = RUNNING
             config_fp = self.generate_config_file()
-            cmd = " ".join(["openvpn", "--config", config_fp])
+            cmd = " ".join(["", "openvpn", "--config", config_fp])
+            cmd = f"sg openvpn -c \"{cmd}\""  # TODO: configable?
             self.run_task = self.loop.create_task(self.run(cmd))
 
     def get_log(self):