The OpenVPN client-file generator checks that the certificate exists where it means to check the private key.
Location
src/op_mode/generate_ovpn_client_file.py:138-139, :153
Problem
The existence check uses cert where key is intended, so --key is never validated.