In your .automount "After=" and "Requires" option can be specified to make it dependent on openvpn@.service and systemd should take care of the rest.