### Operator VPN access to NAS (issue/revoke VPN configs)

`PATCH /api/v1/admin/nas/{id}/vpn`

- Authentication: manager session (JWT) or API token
- Permission: `prm_nas_vpn` (Operator VPN access to NAS (issue/revoke VPN configs))
- Risk: danger
- Rate limit bucket: `t_mutate`

_This endpoint has no hand-written reference entry yet. The method, path, authentication, permission and rate limit above are generated from the running router and are accurate; there is no request or response example._