This one is just an annoyance: every time I provision a routerboard, I need to remember to hand-set the mac under ovpn-server, otherwise it will appear different at every login. This plays hell with using RANCID to monitor the routers for configuration changes.

Mac address is always the same as it was initially set. It is not changing at every login.