diff --git a/core/installer/derived.go b/core/installer/derived.go
index d99f02b..0351b21 100644
--- a/core/installer/derived.go
+++ b/core/installer/derived.go
@@ -90,6 +90,17 @@
 				}
 			}
 			if def.Kind() == KindVPNAuthKey {
+				enabled := true
+				if v, ok := def.Meta()["enabledField"]; ok {
+					// TODO(gio): Improve getField
+					enabled, ok = getField(root, v).(bool)
+					if !ok {
+						return nil, fmt.Errorf("could not resolve enabled: %+v %s %+v", def.Meta(), v, root)
+					}
+				}
+				if !enabled {
+					continue
+				}
 				var username string
 				if v, ok := def.Meta()["username"]; ok {
 					username = v