Say in the doc that DISALLOW_CONFIG_VPN now works.

    /**

     * Specifies if a user is disallowed from configuring VPN.

     * The default value is <code>false</code>.

     * This restriction has no effect in a managed profile.

     * This restriction has an effect in a managed profile only from

     * {@link android.os.Build.VERSION_CODES#MNC}

     *

     * <p/>Key for user restrictions.

     * <p/>Type: Boolean