The variable openvpn_clients_revoke is no longer used in the role.
Indeed, it is now in the scope of the separate easy_rsa role to deal with clients credentials.
However, the openvpn role should at least manage the deletion of the .ovpn file it creates here.
We're including this in a PR soon.