Best solution is probably what those commercial pirates do -buy a bunch of cheap android boxes and pre-configure with your choice of client and VPN, then hand those out. Something goes wrong, they bring it back.