Spent a few hours poking around before I finally found the answer. Hopefully this will help someone out in the future. The resolution is that you must explicitly define a "vpn-simultaneous-logins" attribute or whatever other attributes are in the def...