I contacted PIA a while back they suggested adding
pull-filter ignore “auth-token”
to the ovpn file. This solved it for me.